Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
File: 1-c0pgMHHi89rubgKB5IFiwvK7Us.mft (raw, json)
Hash identifier: zKZtwg/dfmbqcaqjTQwfGmK3lYeIOONAh2WEA+cMOY8=
Subject key identifier: 35:62:F3:EB:B9:94:7F:FF:26:08:34:62:0C:11:3F:14:9B:A6:3C:4C
Authority key identifier: F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
Certificate issuer: /CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Certificate serial: 0198D5F1BF68019DC195A05FF9991AE0AEAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
Manifest number: 1608
Signing time: Sat 23 Aug 2025 08:00:46 +0000
Manifest this update: Sat 23 Aug 2025 08:00:46 +0000
Manifest next update: Sun 24 Aug 2025 08:00:46 +0000
Files and hashes: 1: 1-c0pgMHHi89rubgKB5IFiwvK7Us.crl (hash: sLURDPy/mAQ49A6ZWGnCBK19HVyZzPtVBFOKUxB6w7U=)
2: DBBkmAjtiZvJk178YbVOfqGzI3Y.roa (hash: 8eJVP5XAdO67of9omWg+boW49giOURgUcnG9ZjC9lgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:bf:68:01:9d:c1:95:a0:5f:f9:99:1a:e0:ae:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Validity
Not Before: Aug 23 08:00:46 2025 GMT
Not After : Aug 24 08:00:46 2025 GMT
Subject: CN=3562f3ebb9947fff260834620c113f149ba63c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b4:f8:37:72:e4:16:b2:2a:0b:36:1f:43:d2:
a3:45:01:01:cd:4b:83:a7:4f:c7:6f:c0:cb:c0:ce:
19:6a:d5:a2:6c:90:eb:29:11:b3:41:cc:7f:c4:35:
f7:4a:4c:3e:d4:4b:14:63:ff:7a:25:de:be:a3:3b:
fc:28:58:2e:ff:e0:73:6c:28:8c:d4:64:b3:ac:7d:
2d:ba:88:d1:4c:88:66:0b:02:be:a2:e7:00:84:d6:
12:f4:00:52:be:3d:a6:73:09:a8:71:35:ae:2c:50:
cf:56:3b:e2:a9:00:19:1d:b6:23:4c:ab:e6:e7:a4:
ec:50:4a:f0:64:a8:e2:65:19:24:b3:54:7d:be:ee:
46:e8:26:b1:df:2f:1a:42:66:47:4b:5c:41:1a:b6:
f2:94:16:73:06:44:51:3a:70:b7:64:45:0d:d8:ff:
16:26:39:78:38:f7:16:1a:90:08:57:ef:e3:8d:5b:
19:e6:e7:5b:f9:ce:95:00:8b:1e:2a:96:1a:3f:25:
03:0f:c7:26:52:d7:e1:e4:49:dc:c9:60:98:af:22:
aa:85:70:20:13:ad:b2:29:41:93:4e:3e:dd:87:22:
69:61:d3:c3:3e:6f:cd:10:b0:30:b9:d1:4b:85:81:
5f:23:35:7c:8c:3c:4e:88:3e:4e:d1:df:5c:90:08:
d1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:62:F3:EB:B9:94:7F:FF:26:08:34:62:0C:11:3F:14:9B:A6:3C:4C
X509v3 Authority Key Identifier:
keyid:F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fe:32:cc:fa:c0:f3:35:f4:a4:a1:08:0f:ce:d0:c3:70:88:
fe:f5:72:95:f9:78:fc:af:3d:14:d5:54:d1:57:b9:07:db:5a:
a8:3d:65:6f:e6:b3:e5:0e:01:f5:eb:2f:34:c3:aa:7a:c5:ea:
84:a2:b2:4c:d5:97:ce:78:d5:31:38:57:61:5f:2b:a5:b2:6b:
a1:8b:f4:75:ca:a2:ad:9f:cc:99:69:34:61:76:db:13:36:70:
d4:27:4a:85:96:9e:63:7f:df:c1:f8:46:8b:9c:51:96:b2:2d:
3b:a5:2f:87:89:d6:a7:a3:d9:43:62:23:70:af:e6:99:28:63:
94:e5:ca:0f:ef:47:7b:1b:8b:e9:6d:fd:b5:49:df:6c:af:8b:
dc:77:dc:30:37:01:10:50:02:07:f7:38:3d:ba:3e:d5:7f:49:
b0:3c:7e:38:42:f8:cd:f3:e9:2f:6c:98:14:f7:68:c5:3c:92:
63:7b:e0:8d:7b:6f:35:a1:6c:aa:62:02:3f:70:e0:dc:97:6e:
66:0c:d5:90:23:58:6d:fe:0e:5c:ea:90:c3:c0:cf:ac:fa:c9:
a3:87:50:f9:d7:e9:7e:98:9b:e8:1f:79:05:84:05:52:82:85:
a5:ab:57:23:6c:2c:0d:39:ae:54:de:91:58:1b:e8:3d:48:27:
ed:02:00:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:05:33 2025 by rpki-client